xmlrpc.php attacks
21/10/2018
I received heads up this morning from a friendly Twitter user (@adrianhungate) that my site was down and they were generously offering help to restore. Rebooting the Ubuntu VPS brought it back on-line; but why did it occur? My Duck Duck Fu turned up this useful, if not a little dated gem: Error establishing a database connection (WordPress) grep xmlrpc /var/log/apache2/access.log This showed evidence of several brute-force amplification attacks, which…